Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.cer (raw, json)
Hash identifier: Cj+2U3Xt2ueGDFDOd0xP1E6PyGjcrKtk5QY7PNeHHgo=
Subject key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBDC05B6FDA60EE41D5E68428E497B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204615
IP: 185.225.112.0/22
IP: 185.237.100.0/24
IP: 2a13:2a00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dc:05:b6:fd:a6:0e:e4:1d:5e:68:42:8e:49:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:9c:70:ef:c2:8d:6b:d7:bf:64:7a:7b:03:
cd:cd:13:9d:ba:2b:21:18:48:b7:53:9f:6c:3c:eb:
84:8a:35:9b:ea:8e:48:e2:61:1f:74:06:2d:38:a2:
55:c6:e9:24:5c:c2:36:13:02:ab:87:03:bb:07:df:
f9:bc:5a:d4:f0:99:1f:99:94:d5:bd:02:7d:9f:f2:
46:ba:1d:a0:4d:3c:a4:e9:be:65:14:11:3c:63:de:
c5:8b:1c:f8:1f:b4:f2:a5:0c:4d:a1:9e:6e:76:8c:
81:b9:0a:d7:f6:f0:10:c4:cd:09:db:4e:63:d8:85:
82:15:48:3a:80:47:c8:60:b5:e8:b5:ff:bd:14:75:
06:fd:1b:6d:dd:59:62:7c:64:19:15:84:6c:6d:5f:
c3:0b:a2:cf:48:67:e3:45:21:bb:62:a1:5d:17:9c:
f5:22:59:cc:ef:61:9c:a5:c2:73:80:66:7f:6a:b7:
74:96:bb:1c:46:49:19:81:df:4a:90:12:a7:3c:e8:
7f:12:b4:7d:c0:44:23:16:c0:32:a3:4a:75:2e:34:
82:fb:57:91:31:56:9d:3f:10:9c:2d:07:71:80:57:
0c:cd:96:88:78:4f:60:c0:36:b0:eb:9e:dd:48:f3:
ef:bb:ec:d1:6b:ce:79:06:2f:cd:9c:f2:88:c7:f6:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.112.0/22
185.237.100.0/24
IPv6:
2a13:2a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204615
Signature Algorithm: sha256WithRSAEncryption
18:a1:39:3b:ab:9c:01:66:15:14:8f:02:6b:31:35:a3:88:3f:
72:12:18:c6:ce:51:be:44:14:c6:8d:67:77:8b:77:dc:dc:c7:
1d:68:95:68:87:24:72:79:2c:aa:4e:55:46:ac:54:28:95:11:
63:55:95:7a:0b:d2:fd:c2:56:af:a3:cc:d9:6c:78:30:fb:63:
d4:b1:2b:e5:e7:23:81:cc:94:72:2e:d2:ca:3b:00:ea:18:c1:
f3:4c:78:ea:e4:6b:a8:06:9d:f6:a5:2f:83:63:03:e3:20:46:
7c:79:a8:75:55:6e:21:81:66:51:03:e7:3a:5e:c5:ac:90:76:
ed:a6:a1:ef:55:43:8c:79:de:66:f6:f9:62:60:93:5d:8b:b3:
74:fd:3c:b0:bf:df:b7:0f:52:ee:57:4e:86:68:a0:e5:0f:34:
2f:cd:3b:5f:ba:cc:dc:4e:43:3b:92:91:6b:96:b2:f6:8e:4c:
e5:50:b5:98:77:f8:00:af:f0:f0:b2:ab:59:64:7d:30:3e:c9:
5c:af:69:bb:63:44:81:fb:87:52:b9:fc:3a:51:c6:6e:27:f0:
43:0a:f3:ff:a8:bc:97:4c:1b:e9:33:06:4b:c5:b6:ac:f9:6a:
b3:2b:79:97:7d:d4:2c:78:8a:6e:c1:ac:a9:8b:0c:74:11:4e:
25:24:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net